Privacy Policy
Last updated: 2026-07-13
This policy explains what PebbletsIO collects and why. The short version: the companions run on your device, we don’t read your screen, and product analytics are anonymous and opt-out.
1. What the app senses (and what it never does)
To feel alive, a companion reads coarse, permission-free signals on your device — whether you’re idle, the time of day, and window/display geometry. It does not capture your screen, read window contents, or log keystrokes. The optional “frontmost app” awareness is off by default and, when enabled, only ever sees an app identifier — never document content. All of this stays on your device.
2. Account data
If you create an account, we store your email (or the identifier from Google sign-in) and your purchases (entitlements). We use these to sign you in and restore your companions on other machines. Authentication and data storage are provided by Supabase.
3. Payment data
Payments are handled by Paddle, our merchant of record. We do not receive or store your card details. We receive a record of the transaction (product, amount, status) to grant your entitlement and for tax/accounting.
4. Download watermarking
Each companion you download carries an invisible watermark tied to your account — a one-way cryptographic marker derived from your account identifier, plus a signed license record, stored with your download and included in the companion’s license file. It exists only to trace leaks if a paid companion is redistributed; it is notused to track your activity, and the companion works fully offline. Because this marker is derived from your account, it is treated as personal data and covered by your deletion rights below.
5. Analytics
We use privacy-respecting product analytics (PostHog) to understand aggregate usage. Client events are tied to a random, install-scoped identifier — not your name or email — and contain no screen or document content. You can turn analytics off entirely in Settings; doing so stops all client events immediately.
6. Crash reporting
If enabled, diagnostic crash reports (via Sentry) help us fix bugs. They contain technical details about the error, not your personal content.
7. Your rights and account deletion
You can request access to or deletion of your personal data. Deleting your account erases your profile and analytics link; purchase records may be retained where required for tax/audit. Entitlements die with the account — deleting it removes access to purchased companions, so we ask for explicit confirmation.
8. Contact
Privacy questions: contact us at support@pebbletsio.com.